droid-recon

The skill is internally consistent and not malware: its commands, file access, and outputs all match Android APK static analysis. However, it grants an AI agent substantial offensive security capability and broad local command execution over untrusted APK content, so it should be treated as high-risk security tooling rather than a benign general-purpose helper.